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REMARKS 

Claims 1-19 are pending in this application. Claims 1, 16, 17, and 19 have been 
formally amended to clarify the scope of the invention. Applicant respectfully submits 
that no new matter has been added by these amendments. Support for these amendments 
can be found throughout the specification and original claims, specifically on page 3, 
lines 5-6; page 16, lines 8-13; and page 31, lines 12-14. 

Ob jection to the Drawings 

The drawings are objected to because the Rejection asserts that the claimed 
"plurality of user interface images " "plurality of organization," and "an application and 
associated application data specific to said particular organization" are not shown in the 
Figures. Applicant respectfully disagrees. The "plurality of user interface images" are 
included in the claims as components in a database (see claims 1, 16, and 17) and are 
illustrated in the drawings as components 140 in Database 138 of Figure 3. Specifically, 
as stated on page 9, line 30 - page 10, line 2 and referring to Figure 1 : 

"In the preferred embodiment of the present invention, the system 100 enables 
individual organizations 104 of multiple different organizations to manage 
access of employees to a remotely located application 123 hosted by an 
application service provider 121. The system 100 includes the database 138 and 
the command processor 1 34. The database 138 contains data representing the 
multiple user interface images 140 and the multiple executable procedures 142. 
The multiple user interface images 140 are associated with corresponding 
multiple organizations." 
Thus, data 125 of the Active Directory 122 includes the claimed "plurality of 
organizations." As described in the application on page 10, lines 14-17: "The 
authorization processor 136 further excludes access of the user and employees of the 
particular organization 104 to user interface images 140 and executable procedures 142 
and data 125 associated with organizations other than the particular organization 
104." 

Additionally, contrary to the Examiner's objection, "an application and associated 
application data specific to said particular organization" is presented in Figure 1 . As 
stated on page 10, line 2: "The multiple executable procedures 142 are associated with 
corresponding multiple user interface images 140." The "executable procedures" 
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comprise an application. This application further comprises "associated application data 
specific to said particular organization," as described on page 10, line 3-5: "An 
executable procedure 142 supports a user of the particular organization 104 in managing 
access of employees of the particular organization to the application 123 hosted by the 
application service provider 123." Specifically, as stated on page 10, lines 6-10, "[t]he 
command processor 1 34 employs the database 138 for initiating execution of a particular 
executable procedure 142 in response to a command initiated using a particular user 
interface image 140 associated with the particular executable procedure 142 and with the 
particular organization 104. The particular executable procedure 142 supports the user in 
managing access of an employee of the particular organization 104 to an application 
123." 

Thus, the claimed elements are clearly shown in Figure 1 (and elsewhere) and 
properly described in accordance with 35 USC 112 such as to enable the claimed 
arrangement. The claimed "plurality of user interface images" is denoted in Figure 1 by 
reference numeral "140". Moreover, on page 7 of the present application, it states that 
Figures 2-14 depict the plurality of user interface images (page 7, lines 20-22). Data 
125 of the Acti ve Directory 122 includes the claimed "plurality of organizations." 
Furthermore, executable procedures 142 comprise an application which includes 
"associated application data specific to said particular organization" as described on page 
10, line 3-5. 

Therefore, it is respectfully submitted that no modification to either the drawing 
or the specification is needed. Therefore, Applicant respectfully requests that the 
objection to the drawings be withdrawn. 

Rejection of Claims 1-5. 7-8. and 10-19 under 35 U.S.C. 102(e) 

Claims 1-5, 7-8, and 10-19 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Thompson et al. (U.S. Pub. No. 2003/0229522). 

Amended claim 1 recites a system enabling individual organizations of a plurality 
of different organizations to manage access of their own respective employees to at least 
one remotely located application hosted by an application service provider. At an 
application service provider site, at least one database is included and contains data 
representing a plurality of user interface images associated with a corresponding plurality 
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of organizations and a plurality of executable procedures associated with the 
corresponding plurality of user interface images. An executable procedure supports a 
user of a particular organization of the plurality of organizations in managing access of 
employees of the particular organization to an application hosted by an application 
service provider and used by said plurality of organizations. A command processor 
employs the at least one database for initiating execution of a particular executable 
procedure in response to a command initiated at a remote location associated with the 
particular organization using a particular user interface image associated with the 
particular executable procedure and with the particular organization. The particular 
executable procedure supports the user in managing and granting access of an employee 
of the particular organization to an application and associated application data specific to 
the particular organization without intervention by the application service provider 
and excluding access to the application data specific to the particular organization by 
employees of organizations other than the particular organization. For the reasons 
presented below, Applicant respectfully submits that Thompson fails to provide any 35 
USC 1 12 compliant enabling disclosure of each feature claimed in amended claim 1 and 
does not anticipate amended claim 1 . 

Unlike the present claimed system, Thompson describes a benefit management 
system that provides a portal-based information management and collaborative business 
process application. The Thompson system and method is focused at the benefit 
broker/consultant and is configured to capture employee benefit management data, such 
as demographic data and plan data. One or more users of the Thompson system are 
provided with customized user access to the centralized application for use in performing 
one or more various benefit plan management functions, such as, for example, marketing, 
plan design; enrollment; administration; and communication between one or more 
application users (see Abstract); ■ 

Thompson merely enables access to data after authorization has been completed 
and does NOT allow individual users to manage and control access rights to employees 
of the particular organization as well as exclude access of "application data specific to 
said particular organization" from other users "without intervention by the application 
service provider as in the present claimed invention" as recited in claim f of the 
present claimed invention. Thompson describes that "for a different employer/client, the 
benefit broker firm and the client may determine that the employer wants to limit its 
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direct use of the application 20 to that of a personal employer portal. The firm thus 
grants the employer's human resources administrator access to view the current and 
archived plan information and perform limited plan maintenance functions ..." 
(Thompson, Paragraph 0125). Since the ASP firm grants access, Thompson neither 
discloses nor suggests providing "associated application data specific to said particular 
organization without intervention by the application service provider" as recited in claim 
1 of the present claimed invention. Additionally, Thompson describes "for a third 
employer/client, the human resource representative may he authorized to function as the 
plan administrator and collaborate with the benefit broker firm to perform key functions 
..." (Thompson, Paragraph 0126). Since the representative may be authorized to function 
as the plan administrator and collaborate with the benefit broker, Thompson describes 
intervention by the ASP which is wholly unlike the present claimed invention which 
provides "associated application data specific to said particular organization without 
intervention by the application service provider" as recited in claim 1. 

Thompson describes that "the employer/client may elect to have a personalized 
employer portal and to provide personalized portals to its employees" (paragraph 0127). 
Thompson's "personalized portals" are dedicated application instances tailored to a 
particular user and would NOT use "an executable procedure supporting a user of a 
particular organization of said plurality of organizations in managing access of 
employees of the particular organization to an application hosted by an application 
service provider and used by said plurality of organizations" as recited in claim 1 of 
the present claimed invention. Furthermore, Thompson does not teach how an 
application service provider may restrict organization access to both an application and 
associated application data specific to said particular organization. Providing 
personalized portals is wholly unlike "the particular executable procedure supporting the 
user in managing and granting access of an employee of the particular organization to an 
application and associated application data specific to said particular organization" as 
recited in claim 1 of the present claimed invention. 

Thompson superficially describes Authorization to access and limit rights to 
access an application and application data in paragraphs 0266, 0267, 0269, 0283 and 
0285. However, these paragraphs fail to disclose or suggest organization specific use and 
associated organization specific procedures as claimed in the present claimed invention. 
Thompson merely shows that a user admin functionality provides the application 
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administrator with the ability to create a user and user authorization (Thompson, 
paragraph 0266) but no where suggests "in response to a command initiated at a remote 
location associated with the particular organization using a particular user interface image 
associated with the particular executable procedure and with the particular organization, 
the particular executable procedure supporting the user in managing and granting access 
of an employee of the particular organization to an application and associated application 
data specific to said particular organization without intervention by the application 
service provider- and.excluding access to said application data specific to said particular 
organization by employees of organizations other than said particular organization" 
claimed in the present claimed system. Thus, Thompson does not show or suggest a 
system enabling individual customers of an ASP service to manage their own access 
rights excluding access from other customers without intervention by the ASP as in the 
present claimed invention. Therefore, as each feature claimed in claim 1 is neither shown 
nor suggested by Thompson, Applicant respectfully submits that Thompson does not 
anticipate the present claimed invention. Consequently, it is respectfully requested that 
the rejection of claim 1 be withdrawn. 

Amended claim 2 is dependent on claim 1 and is considered patentable for the 
reasons presented above with respect to claim 1. Claim 2 is also considered patentable 
because Thompson neither discloses nor suggests "said at least one database, said 
command processor, said application and associated application data specific to said 
particular organization are located at said application service provider site behind a 
firewall and access through said firewall by users of said plurality of organizations." The 
Examiner, on page 12 of the Office Action, argues that Thompson discloses all 
limitations as recited in the claim 2. Applicant respectfully disagrees. The Office Action 
references paragraph 0025 of Thompson, "[the client can] view or edit the presentation 
• panels such that access to view or edit the presentation panels is restricted and/or 
providing data security that user access to view or edit data of one or more presentation 
panels is restricted." However, Thompson also indicates that this functionality provides 
"security authorization to control access of users to at least one of portions of the 
presentation panels and/or employee benefits management plan data" (paragraph 0025). 
This is wholly unlike the present claimed invention, which discloses a system for 
accessing a server via firewall to grant rights using data 123 and application 125 (see 
Figure 1). Data 123 and application 125 are not an application or application data 
employed by a user in processing data but are authorization related applications and data 
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e.g. permissions (Application, page 14 lines 10-15 and page 15 lines 8-18 etc) used to 
grant access to the application and application data. Thompson, in paragraph 272, merely 
mentions that a firewall is used but neither discloses nor suggests "said application data 
specific to particular organization are located at said application service provider site 
behind a firewall and accessed through said firewall by users of said plurality of 
organizations" as recited in claim 2 of the present claimed invention. Consequently, it is 
respectfully requested that the rejection of claim 2 be withdrawn. 

Amended claim 3 is dependent on claims 1 and 2 and is considered patentable for 
the reasons presented above with respect to claims 1 and 2. Claim 3 is also considered 
patentable because Thompson neither discloses nor suggests that the "particular 
executable procedure and said particular user interface image are specifically associated 
with said particular organization" and that the "authorization processor excludes access 
of the user and employees of the particular organization to user interface images and 
executable procedures and data associated with organizations other than the particular 
organization" as claimed in claim 3. The section of Thompson cited on pages 5 and 13 of 
the Rejection (paragraph 0286) makes a cursory statement indicating the Thompson 
system has access controls. However, this is not 35 USC 1 12 compliant enabling 
disclosure of the claimed authorization processor which "excludes access" to "executable 
procedures and data associated with organizations other than the particular 
organization" as in the present claimed invention. There is nothing in Thompson that 
enables managing user access to organization specific data and applications as performed 
in the present claimed invention. The Examiner also references paragraph 0126 of 
Thompson, which states that "a second human resources employee may be given 
restricted access to perform limited plan maintenance support tasks, as determined by the 
employer." However, granting a second user (from the same organization) access to 
perform "limited plan maintenance support tasks" is NOT a grant by an "authorization 
processor" as recited in the present claimed invention. In contrast, the claimed system 
utilizes a "particular executable procedure" and a "particular user interface image" that is 
"specifically associated with said particular organization" in "managing and granting 
access of an employee" AND "excluding access... by employees of organizations other 
than the particular organization." These features are neither disclosed nor suggested 
by Thompson. Therefore, Applicant respectfully submits that Thompson does not 
anticipate the present invention claimed in claim 3. Consequently, it is respectfully 
requested that the rejection of claim 3 be withdrawn. 
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Claim 4 is dependent on claims 1 - 3 and is considered patentable for the reasons 
presented above with respect to claims 1 - 3. Consequently, it is respectfully requested 
that the rejection of claim 4 be withdrawn. 

Claim 5 is dependent on claims 1 - 4 and is considered patentable for the reasons 
presented above with respect to claims 1 - 4. Claim 5 is also considered patentable 
because Thompson fails to provide any 35 USC 1 12 compliant enabling disclosure that 
"the directory of permissions comprises a Microsoft compatible Active Control List 
(ACL)" as recited in the present invention. The Rejection states that the Thompson's 
"edit-control access" (stated in paragraph 0286) is equivalent to the claimed invention 
because "ACL has [a] control list of authorization of user or organizations to access." 
However, the present claimed arrangement specifically designates that the directory of 
permissions "comprises a Microsoft compatible Active Control List (ACL)." Thompson 
does NOT mention or suggest a Microsoft compatible ACL or even an "Active Control 
List." Instead, the cited paragraph merely describes roles being used to give differing 
levels of access. Thus, Thompson cannot be equivalent to the claimed feature and thus 
does not anticipate the claimed feature. Consequently, it is respectfully requested that the 
rejection of claim 5 be withdrawn. 

Claim 7 is dependent on claim 1 and is considered patentable for the reasons 
presented above with respect to claim 1. Consequently, it is respectfully requested that 
the rejection of claim 7 be withdrawn. 

Claim 8 is dependent on claim 1 and is considered patentable for the reasons 
presented above with respect to claim 1. Claim 8 is also considered patentable because, 
contrary to-the assertion on page 5 of the Rejection, Thompson neither discloses nor 
suggests the present claimed arrangement. The Rejection, on page 6, states that the "edit- 
control access" stated in paragraph 0286 anticipates "an executable procedure" that 
"enables the user to at least one of, (a) add an employee and (b) remove an employee of 
an organization as a user entitled to access the application hosted by the application 
service provider," However, Thompson merely discloses ASP-based control of ASP 
access. This is fundamentally different from the present claimed invention which 
operates "in response to a command initiated at a remote location associated with the 
particular organization." The claimed system advantageously enables user 
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management to grant and exclude access of employees remotely and without 
intervention by the application service provider. Consequently, it is respectfully 
requested that the rejection of claim 8 be withdrawn. The Rejection also states on page 
1 3, that Thompson provides "client (902) remote access to particular organization." 
Applicant respectfully disagrees. Thompson paragraphs 0271 and 0273 do not mention 
remote access, but generally describes the client (902) as "the presentation tier 902 
[which] interacts strictly with the middle tier 904 [web/application servers]." Thompson 
does NOT disclose nor. suggest "client remote access to a particular organization" as in 
the present claimed invention. Consequently, it is respectfully requested that the 
rejection of claim 8 be withdrawn. 

Claim 10 is dependent on claim 1 and is considered patentable for the reasons 
presented above with respect to claim 1. Claim 10 is also considered patentable because 
Thompson provides no 35 USC 1 12 compliant enabling disclosure in paragraph 0284 (or 
elsewhere) of the present claimed feature. Rather, the cited section provides for an 
authorization service but does so superficially and not in a manner to enable anticipation 
of the present claimed feature. The claimed arrangement recites "an executable 
procedure enables the user to amend information used in authorizing a particular 
employee of an organization to access the application hosted by the application service 
provider." Thompson does not disclose or suggest how authentication may occur and 
certainly does not show or suggest to "amend information used in authorizing" a user. 
Additionally, the Office Action references "edit control access" which is described in 
paragraph 0025 of Thompson: "[the client can] view or edit the presentation panels such 
that access to view or edit the presentation panels is restricted and/or providing data 
security that user access to view or edit data of one or more presentation panels is 
restricted." However, Thompson indicates that this functionality only provides "security 
authorization to control access of users to at least one of portions of the presentation 
panels and/or employee benefits management plan data" (paragraph 0025). Editing 
presentation panels in Thompson is wholly unlike a system wherein "an executable 
procedure enables the user to amend information used in authorizing a particular 
employee of an organization to access the application hosted by the application service 
provider" as recited in claim 10 of the present invention. Consequently, it is respectfully 
requested that the rejection of claim 10 be withdrawn. 
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Claims 1 1 and 12 are dependent on claim 1 and are considered patentable for the 
reasons presented above with respect to claim 1. Claims 1 1 and 12 are also considered 
patentable for the reasons presented above with respect to claims 2 and 10 because 
Thompson, while describing authentication of users, does so in a superficial manner and 
does not show or suggest the claimed "authorization processor" that operates in the 
claimed manner. Additionally, the Office Action references "edit control access" which 
is described in paragraph 0025 of Thompson: "[the client can] view or edit the 
presentation panels such that access to view or edit the presentation panels is restricted 
and/or providing data security that user access to view or edit data of one or more 
presentation panels is restricted." However, Thompson indicates that this functionality 
only provides "security authorization to control access of users to at least one of portions 
of the presentation panels and/or employee benefits management plan data" (paragraph 
0025). Editing presentation panels in Thompson is wholly unlike a system wherein "an 
authorization processor for authorizing access of the employee of the particular 
organization" as recited in claim 11. Furthermore, Thompson neither discloses nor 
suggests that "the authorization processor uses a combination of an organization specific 
identifier and received employee identification information in providing an employee 
access" as recited in claim 12. Consequently, it is respectfully requested that the 
rejection of claims 1 1 and 12 be withdrawn. 

Claim 13 is dependent on claim I and is considered patentable for the reasons 
presented above with respect to claim 1 . Consequently, it is respectfully requested that 
the rejection of claim 1 3 be withdrawn. 

Claim 14 is dependent on claim 1 and is considered patentable for the reasons 
presented above with respect to claim 1. Claim 14 is also considered patentable because 
Thompson neither discloses nor suggests that "the particular executable procedure 
comprises a template procedure customized by at least one of, (a) the user and (b) a 
technician" as recited in the present claimed invention. Contrary to the assertion on page 
7 of the Rejection, paragraph 0076 of Thompson neither discloses nor suggests the 
claimed feature. Rather, the cited section of Thompson provides a customizable template 
for different benefit plans to be utilized by the benefit designer ASP of Thompson. The 
template of Thompson "ensures [plan] design flexibility for total plan customization 
and captures the information necessary to evolve the application" (Thompson, paragraph 
0076). This is fundamentally different from the claimed "particular executable 
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procedure" which operates "in response to a command initiated at a remote location 
associated with the particular organization" and "supports] the user in managing and 
granting access of an employee of the particular organization to an application and 
associated application data specific to said particular organization and excluding access 
to said application data specific to said particular organization by employees of 
organizations other than said particular organization." Thompson enables customized 
benefit plan design via a template and has nothing to do with managing user access by 
granting or excluding users from the system. The Rejection also states on page 14, that 
Thompson provides "client (902) remote access to particular organization.'' Applicant 
respectfully disagrees. Thompson paragraphs 0271 and 0273 do not mention remote 
access, but generally describes the client (902) as "the presentation tier 902 [which] 
interacts strictly with the middle tier 904 [web/application servers]." Thompson does 
NOT disclose nor suggest "client remote access to a particular organization" as in the 
present claimed invention. Consequently, it is respectfully requested that the rejection of 
claim 14 be withdrawn. 

Claim 15 is dependent on claim 1 and is considered patentable for the reasons 
presented above with respect to claim 1 . Consequently, it is respectfully requested that 
the rejection of claim 15 be withdrawn. 

Amended claim 16 comprises a system enabling an individual organization of a 
plurality of different organizations to manage access of their own respective employees to 
at least one remotely located application hosted by an application service provider. At an 
application service provider site, a communication processor for accessing at least one 
database is included. The communication processor contains data representing a plurality 
of user interface images associated with a corresponding plurality of organizations, and a 
plurality of executable procedures associated with the corresponding plurality of user 
interface images. An executable procedure supports a user of a particular organization of 
said plurality of organizations in managing access of employees of the particular 
organization to an application hosted by an application service provider and used by said 
plurality of organizations. The system further comprises at least one repository including 
data representing an application and associated application data specific to said particular 
organization. The system further comprises a command processor for using the 
communication processor in initiating execution of a particular organization specific 
executable procedure in response to a command initiated at a remote user site associated 
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with the particular organization using a particular organization specific user interface 
image communicated to the user site, the particular user interface image being associated 
with the particular executable procedure and with the particular organization, the 
particular executable procedure supporting the user in managing and granting access of 
an employee of the particular organization to said application and said associated 
application data specific to said particular organization following login to said 
application and without intervention by the application service provider and excluding 
access to said application data specific to said. particular organization by employees of 
organizations other than said particular organization. 

Amended claim 16 contains similar features to those of claim 1 and therefore 
arguments presented above with respect to claim 1 are also applicable to claim 16. Claim 
16 is also allowable because Thompson neither discloses nor suggests "the particular 
executable procedure supporting the user in managing and granting access of an 
employee to said application and said associated application data specific to said 
particular organization following login to said application and without intervention by the 
application service provider and excluding access to said application data specific to said 
particular organization by employees of organizations other than said particular 
organization." 

Thompson superficially describes Authorization to access and limit rights to 
access an application and application data in paragraphs 0266, 0267, 0269, 0283 and 
0285. However, these paragraphs fail to disclose or suggest organization specific use and 
associated organization specific procedures as claimed in the present claimed invention. 
Thompson merely shows that a user admin functionality provides the application 
administrator with the ability to create a user and user authorization (Thompson, 
paragraph 0266) but no where suggests "in response to a command initiated at a remote 
user site associated with the particular organization using a particular organization 
specific user interface image communicated to the user site, the particular user interface 
image being associated with the particular executable procedure and with the particular 
organization, (he particular executable procedure supporting the user in managing and 
granting access of an employee of the particular organization to said application and said 
associated application data specific to said particular organization following login to said 
application and without intervention by the application service provider and excluding 
access to said application data specific to said particular organization by employees of 
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organizations other than said particular organization" as claimed in the present claimed 
system. Thus, Thompson does not show or suggest a system enabling individual 
customers of an ASP service to manage their own access rights excluding access from 
other customers without intervention by the ASP as in the present claimed invention. 

Thompson, in Figure 8 and the corresponding description, describes an ASP 
(application service provider) environment wherein data access is controlled AFTER 
user authorization^ completed as disclosed in claim 16. In. contrast, using the claimed 
arrangement, "the system 100 enables individual organizations 104 of multiple different 
organizations to manage access of employees to a remotely located application 123 
hosted by an application service provider 121" (Application, page 9, lines 27-30). Client 
management of a particular application hosted by an ASP is NOT equivalent to the 
general ASP environment relied on in Thompson. Thompson, in paragraph 0271 (and 
Figure 8) which was cited as anticipating the claimed features explicitly describes a 
"multi-tiered architecture 900 for an application service provider". Thompson describes 
the three tiers as the client tier (a user interface), a middle tier (business logic) and a data 
tier (application data storage accessible by users). However, this is fundamentally 
different from the present claimed invention because this architecture functions to allow a 
user to access applications and data AFTER a user is previously authorized. The 
Thompson three tiered architecture described in paragraphs [0271], [0273] and [0275] 
provides no 35 USC 112 compliant enabling description of use of a "particular 
executable procedure" associated with an organization specific user interface image 
"supporting the user in managing and granting access of an employee of the particular 
organization to an application and associated application data specific to said particular 
organization following login to said application and without intervention by the 
application service provider and excluding access to said application data specific to said 
particular organization by employees of organizations other than said particular 
organization" as recited in the present claimed invention. Unlike Thompson, the claimed 
system advantageously enables individual customer organizations of an ASP to manage 
their OWN access of their own employees without ASP intervention. Consequently, it is 
respectfully requested that the rejection of claim 16 be withdrawn. 

Independent claim 17 is considered patentable for the reasons presented above 
with respect to claims J - 3. Consequently, it is respectfully requested that the rejection of 
claim 17 be withdrawn. 
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Claim 1 8 is dependent on claim 17 and is considered patentable for the reasons 
presented above with respect to claim 17. Consequently, it is respectfully requested that 
the rejection of clai m 1 8 be withdrawn. 

Independent claim 19 is considered patentable for the reasons presented above 
with respect to claims 1 and 2. Consequently, it is respectfully requested that the rejection 
of claim 19 be withdrawn. .... . . . . ... . 

In view of the above remarks and amendments to the claims, it is respectfully 
submitted that Thompson provides no 35 USC 1 12 compliant enabling disclosure that 
anticipates the features claimed in claims 1, 16, 17 and 19. As claims 2 - 15 are 
dependent on claim I and claim 18 is dependent on claim 17, Applicant respectfully 
submits that claims 2 - 15 and 17 are also not anticipated by Thompson. Therefore, 
withdrawal of the rejection of claims 1 - 19 is respectfully requested. 

Rejection of Claims 6 and 9 under 35 U.S.C. 103(a) 

Claims 6 and 9 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Winter Thompson et al (U.S. Pub. No. 2003/0229522) in view of Clark et al. (U.S. Patent 
No. 7,237,119). 

Clark describes a method of managing user authorization levels for access to a 
plurality of applications. The method includes receiving a request from a user to establish 
a user profile and establishing an employment indicator for the user. A user authorization 
level template is obtained in response to the employment indicator. The user 
authorization level template identifies a plurality of applications and a user authorization 
level for each application. The user authorization levels are then associated with the user 
(see Abstract). 

Claim 6 is dependent on claims 1 - 4 and is considered patentable for the reasons 
presented above with respect to claims 1 - 4. Claim 6 is also considered patentable 
because Thompson (with Clark) neither discloses nor suggests "a command processor 
employing the at least one database for initiating execution of a particular executable 
procedure in response to a command initiated at a remote location associated with the 
particular organization using a particular user interface image associated with the 
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particular executable procedure and with the particular organization, the particular 
executable procedure supporting the user in managing and granting access of an 
employee of the particular organization to an application and associated application data 
specific to said particular organization without intervention by the application service 
Provider and excluding access to said application data specific to said particular 
organization by employees of organizations other than said particular organization" as 
recited in claim I of the present claimed invention. 

Clark is only concerned with managing user authorization levels to control access 
to applications and permissions within applications WITHOUT regard to users from 
different organizations (see Clark, column 2, lines 42-45; Figure 1). Thompson merely 
enables access of data after authorization has been completed (see Figure 8 and the 
corresponding description). Combining Thompson and Clark would result in a system 
that involves intervention by the application service provider (as provided in Thompson, 
paragraph 0126) using the user management authorization system of Clark. The 
combination neither discloses nor suggests "the particular executable procedure 
supporting the user in managing and granting access of an employee of the particular 
organization to an application and associated application data specific to said particular 
organization without intervention by the application service provider and excluding 
access to said application data specific to said particular organization by employees of 
organizations other than said particular organization" as recited in claim 1 of the present 
claimed invention. Consequently, it is respectfully requested that the rejection of claim 6 
be withdrawn. 

Claim 9 is dependent on claims 1 and 8 and is patentable for the reasons given 
above with respect to claims 1 and 8. Claim 9 is also considered patentable because 
Thompson (with Clark) neither discloses nor suggests "a command processor employing 
the at least one database for initiating execution of a particular executable procedure in 
response to a command initiated at a remote location associated with the particular 
organization using a particular user interface image associated with the particular 
executable procedure and with the particular organization, the particular executable 
procedure supporting the user in managing and granting access of an employee of the 
particular organization to an application and associated application data specific to said 
particular organization without intervention by the application service provider and 
excluding access to said application data specific to said particular organization by 
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employees of organizations other than said particular organization" as recited in claim 1 
of the present claimed invention. Consequently, it is respectfully requested that the 
rejection of claim 9 be withdrawn. 

Having fully addressed the Examiner's rejections, it is believed that, in view of the 
preceding amendments and remarks, this application stands in condition for allowance. 
Accordingly then, reconsideration and allowance are respectfully solicited. If, however, 
the Examiner is of the opinion that such action cannot be taken, the Examiner is invited 
to contact the applicant's attorney at the phone number below, so that a mutually 
convenient date and time for a telephonic interview may be scheduled. 

Respectfully submitted, 
Harry Snyder 
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